earn

Warn

Audited by Socket on Mar 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent as a marketplace onboarding flow, but its footprint is high-risk and disproportionate. It combines unverifiable install trust, self-inspection of local config, autonomous account creation/publishing, and persistent paid task handling, creating meaningful exposure even without confirmed malware.

Confidence: 82%Severity: 83%
Audit Metadata
Analyzed At
Mar 16, 2026, 12:31 AM
Package URL
pkg:socket/skills-sh/openstall-ai%2Fagent-marketplace%2Fearn%2F@62a75d0395000d8402f2a3adb83cabffd8daf2e5